<?php

/**

 * WordPress AtomPub API implementation.

 *

 * @package WordPress

 * @subpackage Publishing

 * @since 2.2.0

 */

class wp_atom_server {

	/**

	 * ATOM content type.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ATOM_CONTENT_TYPE = 'application/atom+xml';

	/**

	 * Categories ATOM content type.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $CATEGORIES_CONTENT_TYPE = 'application/atomcat+xml';

	/**

	 * Service ATOM content type.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $SERVICE_CONTENT_TYPE = 'application/atomsvc+xml';

	/**

	 * ATOM XML namespace.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $ATOM_NS = 'http://www.w3.org/2005/Atom';

	/**

	 * ATOMPUB XML namespace.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $ATOMPUB_NS = 'http://www.w3.org/2007/app';

	/**

	 * Entries path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ENTRIES_PATH = "posts";

	/**

	 * Categories path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $CATEGORIES_PATH = "categories";

	/**

	 * Media path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $MEDIA_PATH = "attachments";

	/**

	 * Entry path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ENTRY_PATH = "post";

	/**

	 * Service path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $SERVICE_PATH = "service";

	/**

	 * Media single path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $MEDIA_SINGLE_PATH = "attachment";

	/**

	 * ATOMPUB parameters.

	 *

	 * @since 2.2.0

	 * @var array

	 */

	var $params = array();

	/**

	 * Supported ATOMPUB media types.

	 *

	 * @since 2.3.0

	 * @var array

	 */

	var $media_content_types = array('image/*','audio/*','video/*');

	/**

	 * ATOMPUB content type(s).

	 *

	 * @since 2.2.0

	 * @var array

	 */

	var $atom_content_types = array('application/atom+xml');

	/**

	 * ATOMPUB methods.

	 *

	 * @since 2.2.0

	 * @var unknown_type

	 */

	var $selectors = array();

	/**

	 * Whether to do output.

	 *

	 * Support for head.

	 *

	 * @since 2.2.0

	 * @var bool

	 */

	var $do_output = true;

	/**

	 * Constructor - Sets up object properties.

	 *

	 * @since 2.2.0

	 * @return AtomServer

	 */

	function __construct() {

		$var_by_ref = explode( '/', $_SERVER['SCRIPT_NAME'] );

		$this->script_name = array_pop( $var_by_ref );

		$this->app_base = site_url( $this->script_name . '/' );

		$this->selectors = array(

			'@/service$@' =>

				array('GET' => 'get_service'),

			'@/categories$@' =>

				array('GET' => 'get_categories_xml'),

			'@/post/(\d+)$@' =>

				array('GET' => 'get_post',

						'PUT' => 'put_post',

						'DELETE' => 'delete_post'),

			'@/posts/?(\d+)?$@' =>

				array('GET' => 'get_posts',

						'POST' => 'create_post'),

			'@/attachments/?(\d+)?$@' =>

				array('GET' => 'get_attachment',

						'POST' => 'create_attachment'),

			'@/attachment/file/(\d+)$@' =>

				array('GET' => 'get_file'),

			'@/attachment/(\d+)$@' =>

				array('GET' => 'get_attachment',

						'PUT' => 'put_attachment',

						'DELETE' => 'delete_attachment'),

		);

	}

	/**

	 * Handle ATOMPUB request.

	 *

	 * @since 2.2.0

	 */

	function handle_request() {

		if ( !empty( $_SERVER['ORIG_PATH_INFO'] ) )

			$path = $_SERVER['ORIG_PATH_INFO'];

		else

			$path = $_SERVER['PATH_INFO'];

		$method = $_SERVER['REQUEST_METHOD'];

		$this->process_conditionals();

		//$this->process_conditionals();

		// exception case for HEAD (treat exactly as GET, but don't output)

		if ($method == 'HEAD') {

			$this->do_output = false;

			$method = 'GET';

		}

		// redirect to /service in case no path is found.

		if (strlen($path) == 0 || $path == '/')

			$this->redirect($this->get_service_url());

		// check to see if AtomPub is enabled

		if ( !get_option( 'enable_app' ) )

			$this->forbidden( sprintf( __( 'AtomPub services are disabled on this site. An admin user can enable them at %s' ), admin_url('options-writing.php') ) );

		// dispatch

		foreach ( $this->selectors as $regex => $funcs ) {

			if ( preg_match($regex, $path, $matches) ) {

				if ( isset($funcs[$method]) ) {

					// authenticate regardless of the operation and set the current

					// user. each handler will decide if auth is required or not.

					if ( !$this->authenticate() ) {

						$this->auth_required('Credentials required.');

					}

					array_shift($matches);

					call_user_func_array(array($this,$funcs[$method]), $matches);

					wp_die();

				} else {

					// only allow what we have handlers for...

					$this->not_allowed(array_keys($funcs));

				}

			}

		}

		// oops, nothing found

		$this->not_found();

	}

	/**

	 * Retrieve XML for ATOMPUB service.

	 *

	 * @since 2.2.0

	 */

	function get_service() {

		if ( !current_user_can( 'edit_posts' ) )

			$this->auth_required( __( 'Sorry, you do not have the right to access this site.' ) );

		$entries_url = esc_attr($this->get_entries_url());

		$categories_url = esc_attr($this->get_categories_url());

		$media_url = esc_attr($this->get_attachments_url());

		$accepted_media_types = '';

		foreach ($this->media_content_types as $med) {

			$accepted_media_types = $accepted_media_types . "<accept>" . $med . "</accept>";

		}

		$atom_prefix="atom";

		$atom_blogname = get_bloginfo('name');

		$service_doc = <<<EOD

<service xmlns="$this->ATOMPUB_NS" xmlns:$atom_prefix="$this->ATOM_NS">

  <workspace>

    <$atom_prefix:title>$atom_blogname Workspace</$atom_prefix:title>

    <collection href="$entries_url">

      <$atom_prefix:title>$atom_blogname Posts</$atom_prefix:title>

      <accept>$this->ATOM_CONTENT_TYPE;type=entry</accept>

      <categories href="$categories_url" />

    </collection>

    <collection href="$media_url">

      <$atom_prefix:title>$atom_blogname Media</$atom_prefix:title>

      $accepted_media_types

    </collection>

  </workspace>

</service>

EOD;

		$this->output($service_doc, $this->SERVICE_CONTENT_TYPE);

	}

	/**

	 * Retrieve categories list in XML format.

	 *

	 * @since 2.2.0

	 */

	function get_categories_xml() {

		if ( !current_user_can( 'edit_posts' ) )

			$this->auth_required( __( 'Sorry, you do not have the right to access this site.' ) );

		$home = esc_attr(get_bloginfo_rss('url'));

		$categories = "";

		$cats = get_categories(array('hierarchical' => 0, 'hide_empty' => 0));

		foreach ( (array) $cats as $cat ) {

			$categories .= "    <category term=\"" . esc_attr($cat->name) . "\" />\n";

		}

		$output = <<<EOD

<app:categories xmlns:app="$this->ATOMPUB_NS"

	xmlns="$this->ATOM_NS"

	fixed="yes" scheme="$home">

	$categories

</app:categories>

EOD;

		$this->output($output, $this->CATEGORIES_CONTENT_TYPE);

	}

	/**

	 * Create new post.

	 *

	 * @since 2.2.0

	 */

	function create_post() {

		global $user_ID;

		$this->get_accepted_content_type($this->atom_content_types);

		$parser = new AtomParser();

		if ( !$parser->parse() )

			$this->client_error();

		$entry = array_pop($parser->feed->entries);

		$publish = ! ( isset( $entry->draft ) && 'yes' == trim( $entry->draft ) );

		$cap = ($publish) ? 'publish_posts' : 'edit_posts';

		if ( !current_user_can($cap) )

			$this->auth_required(__('Sorry, you do not have the right to edit/publish new posts.'));

		$catnames = array();

		if ( !empty( $entry->categories ) ) {

			foreach ( $entry->categories as $cat ) {

				array_push($catnames, $cat["term"]);

			}

		}

		$wp_cats = get_categories(array('hide_empty' => false));

		$post_category = array();

		foreach ( $wp_cats as $cat ) {

			if ( in_array($cat->name, $catnames) )

				array_push($post_category, $cat->term_id);

		}

		$blog_ID = get_current_blog_id();

		$post_status = ($publish) ? 'publish' : 'draft';

		$post_author = (int) $user_ID;

		$post_title   = '';

		$post_content = '';

		$post_excerpt = '';

		$pubtimes     = '';

		if ( isset( $entry->title ) && is_array( $entry->title ) && !empty( $entry->title[1] ) )

			$post_title = (string) $entry->title[1];

		if ( isset( $entry->content ) && is_array( $entry->content ) && !empty( $entry->content[1] ) )

			$post_content = (string) $entry->content[1];

		if ( isset( $entry->summary ) && is_array( $entry->summary ) && !empty( $entry->summary[1] ) )

			$post_excerpt = (string) $entry->summary[1];

		if ( !empty( $entry->published ) )

			$pubtimes = (string) $entry->published;

		$pubtimes = $this->get_publish_time( $pubtimes );

		$post_date = $pubtimes[0];

		$post_date_gmt = $pubtimes[1];

		if ( isset( $_SERVER['HTTP_SLUG'] ) )

			$post_name = $_SERVER['HTTP_SLUG'];

		$post_data = compact('blog_ID', 'post_author', 'post_date', 'post_date_gmt', 'post_content', 'post_title', 'post_category', 'post_status', 'post_excerpt', 'post_name');

		$this->escape($post_data);

		$postID = wp_insert_post($post_data);

		if ( is_wp_error( $postID ) )

			$this->internal_error($postID->get_error_message());

		if ( !$postID )

			$this->internal_error(__('Sorry, your entry could not be posted. Something wrong happened.'));

		// getting warning here about unable to set headers

		// because something in the cache is printing to the buffer

		// could we clean up wp_set_post_categories or cache to not print

		// this could affect our ability to send back the right headers

		@wp_set_post_categories($postID, $post_category);

		do_action( 'atompub_create_post', $postID, $entry );

		$output = $this->get_entry($postID);

		$this->created($postID, $output);

	}

	/**

	 * Retrieve post.

	 *

	 * @since 2.2.0

	 *

	 * @param int $postID Post ID.

	 */

	function get_post($postID) {

		global $entry;

		if ( ! get_post( $postID ) || ! current_user_can( 'edit_post', $postID ) )

			$this->auth_required( __( 'Sorry, you do not have the right to access this post.' ) );

		$this->set_current_entry($postID);

		$output = $this->get_entry($postID);

		$this->output($output);

	}

	/**

	 * Update post.

	 *

	 * @since 2.2.0

	 *

	 * @param int $postID Post ID.

	 */

	function put_post($postID) {

		// checked for valid content-types (atom+xml)

		// quick check and exit

		$this->get_accepted_content_type($this->atom_content_types);

		$parser = new AtomParser();

		if ( !$parser->parse() )

			$this->bad_request();

		$parsed = array_pop($parser->feed->entries);

		// check for not found

		global $entry;

		$this->set_current_entry($postID);

		if ( !current_user_can('edit_post', $postID) )

			$this->auth_required(__('Sorry, you do not have the right to edit this post.'));

		$publish = ! ( isset($parsed->draft) && 'yes' == trim($parsed->draft) );

		if ( $publish && ! current_user_can( 'publish_posts' ) )

			$this->auth_required( __( 'Sorry, you do not have the right to publish this post.' ) );